1. Who we are

Spirit Sound Ltd ("we", "us", "our"), company number 15137543, registered office 79 Tib Street, Manchester, England, M4 1LS, is the "data controller" responsible for your personal data under the UK GDPR and the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025). Contact: contact@chantressseba.com.

2. What data we collect

• Identity & contact data: name, email, phone, billing and delivery address.

• Order & payment data: items ordered, order value, transaction records. Card details are processed directly by our payment processor and are not stored by us in full.

• Account data: login details, order history (if you create an account).

• Marketing data: your newsletter subscription status and preferences.

• Technical & usage data: IP address, device/browser type, pages visited and information collected via cookies and similar technologies (see our Cookie Policy).

3. How and why we use your data (purposes and lawful bases)

• To process and deliver your orders and provide customer support. Lawful basis: performance of a contract.

• To take payment for your order via Squarespace Payments. Lawful basis: performance of a contract.

• To send our newsletter and marketing emails. Lawful basis: your consent (which you may withdraw at any time).

• To measure and improve our website and understand how it is used. Lawful basis: your consent (advertising/analytics cookies) and/or our legitimate interests in running and improving our business.

• To advertise our products, including via Meta (Facebook/Instagram) using the Meta Pixel and retargeting. Lawful basis: your consent.

• To comply with legal, tax and accounting obligations. Lawful basis: legal obligation.

• To protect against fraud and secure our website. Lawful basis: legitimate interests.

4. Who we share your data with

We use trusted service providers ("processors") who act on our instructions:

• Squarespace Inc. / Squarespace Ireland Ltd — website hosting, Squarespace Payments (payment processing) and Squarespace Email Campaigns (newsletter).

• Meta Platforms Ireland Ltd — advertising and measurement via the Meta Pixel, only where you have consented.

• Shipping/couriers, e.g. Royal Mail / DPD / DHL — for delivery.

• We do not sell your personal data.

5. International transfers

Some of our providers (e.g. Squarespace, Meta) are based outside the UK. Where personal data is transferred outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum (IDTA) to ensure your data is protected to UK standards.

6. How long we keep your data

• Order and transaction records: [6] years (to meet UK tax/accounting law).

• Account data: until you close your account or after [X] years of inactivity.

• Marketing data: until you unsubscribe or withdraw consent.

• Cookie data: for the periods set out in our Cookie Policy.

7. Your rights

Under UK GDPR you have the right to: access your data; rectification; erasure; restriction of processing; data portability; to object to processing; and to withdraw consent at any time (this does not affect processing before withdrawal). To exercise any right, contact contact@chantressseba.com . We will respond within one month.

8. Complaints

If you have a concern, please contact us first at contact@chantressseba.com .

We will acknowledge your complaint within 30 days and handle it through our documented process. If you remain dissatisfied, you can complain to the Information Commissioner's Office (ICO): www.ico.org.uk — helpline 0303 123 1113.

9. Changes to this policy

We may update this policy from time to time. The current version is always available on this page.